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Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1)[3 Responsive to communication(s) filed on 23 July 2007 . 
2a)D This action is FINAL. 2b)l3 This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) ^ Claim(s) 1-33 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) ^ Claim(s) 1-33 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. , . 

3. Q Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 

1. The request filed July 23, 2007 for a request for continued examination (RCE) 
under 37 CFR 1.114 based on patent application 10/659,335 is acceptable and 
an RCE has been established. Every Independent claims 1, 5, 11-12, 14, 18 
and 24 has been amended. Claims 1-33 are pending/ examined. 

2. In the pervious office action claims 1-4 and 14-23 were rejected under 35 
U.S.C. § 112, second paragraph. However the amendment made to the 
respective claims overcome the rejection. Thus the 35 U.S.C. § 1 12 rejection set 
forth in the previous office action is withdrawn. 

Priority 

3. Receipt is acknowledged of papers submitted under 35 U.S.C. 119 (a)-(d), which 
papers have been placed of record in the file. 

Response to Arguments 

4. Applicant's remark/ arguments filed on July 23, 2007 have been fully considered 
but are moot in view of the new ground/ s of rejection. 

Claim Rejections - 35 USC §103 

5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed 
or described as set forth in section 102 of this title, if the differences between the 
subject matter sought to be patented and the prior art are such that the subject 
matter as a whole would have been obvious at the time the invention was made 
to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was 
made. 
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6. Claims 1-33 are rejected under 35 U.S.C. 103 (a) as being unpatentable over 
Bowe et al (hereinafter referred as Bowe) (U.S. Publication No. 2003/0093678 
Al) (filed on April 23, 2001) in view of Spain et al (hereinafter referred to as 
Spain) (U.S. Patent No. 7,058,811 B2) (filed on 10/31/2001) 

Examiner has pointed out particular references contained in the prior arts of 
record in the body of this action for the convenience of the applicant. Although 
the specified citations are representative of the teachings in the art and are 
applied to the specific limitations within the individual claim, other passages 
and figures may apply as well. Applicant should consider the entire prior art as 
applicable as to the limitations of the claims. It is respectfully requested from 
the applicant, in preparing the response, to consider fully the entire references 
as potentially teaching all or part of the claimed invention, as well as the context 
of the passage as taught by the prior arts or disclosed by the examiner 

7. As per independent claims 1, 5, 11-12, 14. 18. 24 and 28 and dependent 
claims 29-33 Bowe discloses an information processing method executed by a 
center system [See at least Paragraph 0054, a a server-side digital signature 
system/ method], said information processing method comprising: 

receiving a first digital signature for specific data stored in said center system 
and a request to allow a first user to be allowed to read said stored specific data, 
from a terminal of a second user [See abstract and figure 3, paragraph 0060] (On 
abstract the following has been disclosed, "A digital signature system is provided on a 
server for use by remote clients, such as by using a browser. The server generates and 
maintains all of the users' keys used for producing a digital signature. A user sends a 
data object to the server, and the server generates a digital signature for the data object 
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using the private key stored at the server. The server then sends the digital signature to 
the client A client can, at a later time, send the signature back to the server for 
verification." Furthermore on paragraph 0060 and figure 3, the following has been 
disclosed/ shown. a FIG. 3 shows a Verification Request and a Verification Response 
according to the present invention. Client 1 00 can later send the signed object 230 to the 
server 120 for verification. The server verifies the signature by obtaining the data object 
210 and the hash from the first signature 225 from the signed object The server 
generates a second hash 310 using the data object and compares the hash from 
the first signature 225 with the second hash 310. If the signatures match, the 
signature is valid. The server returns an indicator 320 showing the status of the 
signature, either valid or invalid. *) 
and ; 

confirming if an authority to give said first user permission to read said 
stored specific data is granted to said second user by comparing the received first 
digital signature with a second digital signature, which is registered in a data 
storage unit so as to correspond to said stored specific data; [paragraph 0060 and 
figure 3] (On paragraph 0060, the following has been disclosed. "FIG. 3 shows a 
Verification Request and a Verification Response according to the present invention. Client 
100 can later send the signed object 230 to the server 120 for verification. The server 
verifies the signature by obtaining the data object 210 and the hash from the first 
signature 225 from the signed object. The server generates a second hash 310 using the 
data object and compares the hash from the first signature 225 with the second hash 
310. If the signatures match, the signature is valid. The server returns an indicator 
320 showing the status of the signature, either valid or invalid.") and 

Furthermore on figure 3, Bowe discloses that if first signature and said second 

signature are identical, sending a verification Response & indicator. 

Bowe does not explicitly disclose 
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• Confirming if an authority to give said first user permission to read data 

by comparing the received first digital signatures with second digital signature. 
However, in the same field of endeavor, Spain discloses the following, which 
meets the above limitation, 

a A digital signature generator is included to create a digital signature of the 
hardware address of the hardware element. A memory element stores the digital 
signature of the hardware element. A software program is included to compare the 
digital signature of the hardware element to a known value. If the digital signature of 
the hardware element matches the known value, the user may be granted read 
and write access to all memory locations within the memory element, including a 
location in which the hardware address is stored." [See at least the abstact] 
It would have been obvious to one having ordinary skill in the art, at the time the 
invention was made, to combine the features of comparing digital signatures before 
granting access for read /write as per teachings Spain into the method as taught by 
Bowe in order to verify the authenticity of the request before granting access to 
read/write. [See Spain, lines 58-59] 

8. As per claims 2. 15 and 25 the combination of Bowe and Spain discloses 
an information processing method as applied to claims above. Furthermore Bowe 
discloses the method,wherein said performing comprises transmitting hash data, 
which is registered in said data storage unit so as to correspond to said specific 
data, and which represents that an authority to read said specific data is granted 
to said first user, to a terminal of said first user, [paragraph 0060 and figure 3] (On 
paragraph 0060, the following has been disclosed. *FIG. 3 shows a Verification Request 
and a Verification Response according to the present invention. Client 1 00 can later send 
the signed object 230 to the server 120 for verification. The server verifies the signature 
by obtaining the data object 210 and the hash from the first signature 225 from the 
signed object. The server generates a second hash 310 using the data object and 
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compares the hash from the first signature 225 with the second hash 310. If the 
signatures match, the signature is valid. The server returns an indicator 320 
showing the status of the signature, either valid or invalid.") 

9. As per claims 3-4.6-10. 13. 16-17.19-23 and 26-27 the combination of 
Bowe and Spain discloses an information processing method as applied to claims 
above. Furthermore Bowe discloses the method, further comprising: said first 
signature and said second signature are not identical, generating second hash 
data from said first digital signature; confirming if said authority to give said first 
user first user said permission to read specific data is granted by said second user 
by comparing the generated second hash data with hash data, which is registered 
in said data storage unit so as to correspond to said specific data; and executing a 
processing for enabling said first user to read said specific data. [See at least 
paragraph 0036] ( On paragraph 0036, Bowe discloses the following . "Subsequently, 
upon a request from the client, the server authenticates the signed object by deriving the 
original data object and the signature from information obtained from the signed object 
sent by the client. The server then generates a comparison value by hashing the original 
data object to produce a second hash, and comparing the hash value in the signature to 
the second hash. The server also checks the hash value in the signature using the user's 
public key. If the document is authenticated, the server notifies the client that the 
authentication was successful. * Furthermore, Spain on the abstract discloses the 
following. "A digital signature generator is included to create a digital signature of the 
hardware address of the hardware element. A memory element stores the digital 
signature of the hardware element. A software program is included to compare the digital 
signature of the hardware element to a known value. If the digital signature of the 
hardware element matches the known value, the user may be granted read and 
write access to all memory locations within the memory element, including a 
location in which the hardware address is stored. ") 
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Conclusion 



10. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. (PTO-Form 892). 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Samson B Lemma whose telephone number is 571- 
272-3806. The examiner can normally be reached on Monday-Friday (8:00 am— 4: 
30 pm). 

If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, BARRON JR GILBERTO can be reached on 571-272-3799. 
The fax phone number for the organization where this application or proceeding is 
assigned is 703-873-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR 
only. For more information about the PAIR system, see http:// pair- 
direct. uspto.gov. Should you have questions on access to the Private PAIR system, 
contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 



09/15/2007 



SAMSON LEMMA 




GILBERTO BARRON J£t 
SUPERVISORY PATENT EXAMINER 
TECHNOLOGY CENTER 2100 



